Contact
1. Which address to use
| Subject | Address | Use it for |
|---|---|---|
| Support & billing | info@tjnovaltd.com | Anything about your account, an order, access you have paid for but not received, a refund request, or an invoice. |
| Privacy & data | info@tjnovaltd.com | Access, correction, deletion, portability or objection requests under UK GDPR, and any question about how we handle personal data. Put “Data request” in the subject line. |
| Security | security@tjnovaltd.com | Suspected vulnerabilities, exposed credentials, or abuse of a Service. See section 3. |
| Legal & formal notice | info@tjnovaltd.com or the registered office | Contractual notice, disputes, rights-holder complaints, and anything that must be “in writing”. |
Postal address for service of documents: TJ NOVA LTD, 124–128 City Road, London, EC1V 2NX, United Kingdom. This is a registered office, not a trading address — it is not staffed for visitors and cannot take deliveries of goods.
2. What to expect
- Acknowledgement: we aim to acknowledge within 2 business days.
- Support and billing: we aim to give a substantive answer within 5 business days.
- Data requests under UK GDPR: answered within one month of receiving the request and enough information to identify you, extendable by two further months for complex or numerous requests, in which case we will tell you within the first month.
- What speeds it up: the account email address, the order or invoice number, what you expected to happen, what actually happened, and the date and time.
These are targets, not contractual service levels. Where a signed agreement sets different response times, that agreement governs.
3. Reporting a security issue
Send the report to security@tjnovaltd.com with enough detail to reproduce the issue: the affected URL or endpoint, the steps, and the impact. Please give us a reasonable opportunity to fix it before disclosing it publicly.
Do not, in the course of testing: access, modify or delete data that is not yours; degrade or interrupt a Service; use social engineering, phishing or physical intrusion; or run automated scanning that generates significant load. Testing that stays within those limits and is reported to us in good faith is welcome, and we will not pursue action over it. Testing that goes beyond them falls under the Acceptable Use Policy.
We do not currently operate a paid bug bounty. We do credit reporters who ask to be credited.
4. If you are not satisfied
If our answer does not resolve the matter, reply to the same thread asking for it to be escalated, and say what outcome you are looking for. We will review it and respond.
For data protection specifically, you also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority in your country of residence. We would ask you to raise it with us first so we have a chance to put it right.
5. What these addresses are not for
Unsolicited sales, SEO, link-building, guest-post and directory-listing offers are deleted unread. Sending them repeatedly after being asked to stop may be treated as abuse under the Acceptable Use Policy.